Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: XuO6J4Xux77/KvbWsjmd3P0Sb0vVj/iVjKao989lx/8=
Subject key identifier: F7:CC:0C:E6:FD:53:F9:06:58:26:F5:EA:B0:17:D2:E7:2A:D3:3E:11
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 0198469B2FC6EDCB1C7B624278BEF7E1E019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 1572
Signing time: Sat 26 Jul 2025 12:00:32 +0000
Manifest this update: Sat 26 Jul 2025 12:00:32 +0000
Manifest next update: Sun 27 Jul 2025 12:00:32 +0000
Files and hashes: 1: 81MEacBenBgmbO5jhDxF0nT9AY8.roa (hash: vqTM9hVXCE9d+gr3kAinLULx9Hs2eNhvPcIV7jj+wQo=)
2: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: EJp62YMLnImT1pV3NFM8aURWWF1ff+lug/dC08CKRQY=)
3: sdKlP2Aw2qctGsD4JmkFw0F6ogE.roa (hash: QHNv9dzaWkHzsPtxPcBQqXpHwKOh3KwCvpG8ivysLbs=)
4: uxkgUTNHz5hEl5ZXCX6UmUPRqGc.roa (hash: L+VrhfELaxB0CKXlAjrRZtLxN2tzA9plKPHYSxcGzdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:2f:c6:ed:cb:1c:7b:62:42:78:be:f7:e1:e0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Jul 26 12:00:32 2025 GMT
Not After : Jul 27 12:00:32 2025 GMT
Subject: CN=f7cc0ce6fd53f9065826f5eab017d2e72ad33e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:f0:c5:be:99:84:7a:e8:f6:83:08:22:82:
fb:6b:9e:fc:7a:28:f4:02:f5:4e:8f:ef:ff:6c:5d:
54:3e:88:a8:a0:67:b8:9d:6e:bd:55:af:63:ec:76:
8a:e1:a7:a4:5a:42:a3:12:26:91:70:db:61:ec:d3:
91:fe:00:18:27:cb:1f:19:3a:6b:ec:57:96:d0:e0:
84:1a:aa:cd:50:84:8b:d1:d9:35:e0:9d:11:7d:d5:
e0:fa:5a:2a:62:97:87:ff:c3:51:de:7f:b4:4e:48:
aa:35:0f:39:7a:94:e2:78:43:18:c3:29:8b:63:cf:
b7:d0:49:c9:f5:00:a4:25:d3:e4:c1:47:e1:a6:01:
70:02:c5:17:b9:2a:06:ed:24:6f:c6:07:d2:67:3e:
aa:5d:11:48:35:67:a2:f3:57:0b:b0:0e:a9:f2:7f:
75:22:3f:6d:3a:63:69:58:d6:39:6d:b3:14:d8:aa:
17:8e:29:c7:4f:28:ed:d2:e3:c8:34:8a:4f:01:06:
8b:36:1d:24:23:3c:28:0f:df:8b:ae:e6:c3:48:2b:
48:91:3b:24:aa:78:3f:45:3d:d3:93:60:c9:f3:0f:
85:05:15:b3:32:72:8f:9c:e6:b0:0e:b4:94:05:ec:
97:04:36:10:bf:f1:20:f2:32:c9:d0:ee:80:5d:22:
16:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CC:0C:E6:FD:53:F9:06:58:26:F5:EA:B0:17:D2:E7:2A:D3:3E:11
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:18:0a:e5:f4:c7:68:7a:4c:7e:a1:ec:43:64:1a:ea:30:51:
68:81:a6:c2:0f:3e:c3:c4:1c:74:f9:64:d7:f5:3e:72:d3:f3:
81:fb:94:7f:1f:12:2e:cf:25:3e:c3:d4:27:26:c6:8f:da:1e:
c5:c7:c0:1e:30:e5:06:3e:1e:7f:51:c1:f7:a1:9c:2b:c9:10:
f4:ea:63:45:91:4b:62:ea:95:5f:b2:0f:6a:68:da:19:ef:c1:
bd:7d:64:67:9c:93:db:86:e5:d5:7d:b9:b6:e6:f8:b4:b0:a0:
81:87:4d:da:38:ab:85:bf:78:6a:ce:b8:35:12:dd:cc:ce:ae:
42:ec:9e:cd:d6:a9:51:1b:be:5f:ea:9a:04:8d:7e:ea:9d:81:
ea:37:56:f9:70:8a:b6:61:e5:1e:5f:e7:45:bd:ea:20:29:0c:
1d:21:e6:68:78:03:31:94:66:6e:8b:38:14:c1:84:6d:7d:00:
3a:1b:24:2b:cb:e4:fd:31:fa:df:59:5d:4d:cf:41:9c:60:31:
a6:45:21:d8:97:40:03:7e:59:3a:29:b8:8b:92:3d:bb:e5:f2:
0d:c2:1a:11:10:dc:9e:fc:b0:ce:73:52:f4:be:01:87:9d:56:
83:3a:c7:3f:32:2d:4e:62:ee:73:a1:89:76:52:94:ec:1b:69:
28:ef:56:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:58:43 2025 by rpki-client